Add Configuration for change behavior of token authentication.

Please consider this code. In our case we want the customer who receives the link on the email does not have to authenticate.